P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Researchers disclosed P7 DarkSword, an evolved iOS exploit kit that chains WebKit/CoreAudio vulnerabilities to escape the browser, escalate to kernel privileges, and inject an implant into SpringBoard; the implant harvests iCloud Keychain, app data, photos, and crypto-wallets, supports frequent beaconing and numerous remote commands, and has been observed in campaigns targeting Saudi Arabia, Turkey, Malaysia, and Ukraine with multiple C2 hosts and leaked components tied to financially motivated Chinese-speaking operators.